ARTICLE · 10 JULY 2015

NAIC's New 12-Step Cybersecurity Program

Bradley Arant Boult Cummings LLP

Explore more from Bradley Arant Boult Cummings LLP

The Cybersecurity Task Force of the National Association of Insurance Commissioners (NAIC) has released formal guidance outlining the data security safeguards that the insurance industry and state insurance regulators should implement.

United StatesInsurance

The Cybersecurity Task Force of the National Association of Insurance Commissioners (NAIC) has released formal guidance outlining the data security safeguards that the insurance industry and state insurance regulators should implement to ensure that sensitive information and the industry's data infrastructure are protected from cybersecurity intrusions.

Released on April 16, 2015, the NAIC's "Principles for Effective Cybersecurity: Insurance Regulatory Guidance" outlines 12 principles for the protection of confidential and/or personally identifiable consumer information held by insurers, insurance producers and other entities regulated by state insurance regulators.

With one exception, the principles do not introduce new compliance burdens and generally reflect the industry's existing best practices. However, in light of the recent high-profile data breaches at Trustmark Insurance Company, CareFirst BlueCross BlueShield, Premera Blue Cross, and Anthem, the NAIC

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

NAIC Credit Rating Provider (E) Working Group Moves Toward Adoption Of Due Diligence Framework

United StatesInsurance

Bankruptcy Court Holds Software Product Sales May Constitute Technology Services “Performed For Others For Compensation”

United StatesInsurance

Why Won’t Life Insurance Pay Out? 8 Reasons A Claim May Be Denied Or Delayed

United StatesInsurance

Morgan & Morgan

Delaware Court Finds No D&O Coverage For Internal Investigation And “Impending” FBI Investigation That Never Proceeded

United StatesInsurance

Don’t Try To Deny It: Federal Court Holds FCA Settlement Is Covered By Insurance

United StatesInsurance

Crowell & Moring LLP

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

Comparative Guide

Insurance & Reinsurance

See more popular content from

Insurance

New York Ends The Year With Onerous New Insurance Coverage Disclosure Rules For Defendants In Product Liability Litigation

On December 31, 2021, New York Governor Kathy Hochul closed the year by signing into law the Comprehensive Insurance Disclosure Act (S7052) to impose sweeping changes to the rules embodied...

United StatesInsurance

Wilson Elser Moskowitz Edelman & Dicker LLP

AI Regulation In Insurance: A Crossroads

As artificial intelligence development accelerates and safety concerns mount, state insurance regulators are advancing comprehensive examination frameworks to govern AI use in the insurance industry. The National Association of Insurance Commissioners nears completion of its AI Risk Evaluation Supplement, which will establish standardized oversight procedures for insurers' AI governance practices across market conduct and financial examinations.

United StatesInsurance

McDermott Will & Schulte

Privacy, Cyber & Data Strategy Advisory | NAIC Summer Meeting Sharpens Focus On AI, Data, And Technology Governance

The National Association of Insurance Commissioners intensified its regulatory focus on artificial intelligence governance, third-party data models, and cybersecurity oversight at its Summer 2026 meeting. Regulators are shifting from principles-based guidance to examination-ready supervisory tools, emphasizing that insurers remain accountable for the technologies and vendors they deploy. The meeting revealed how AI risk evaluation, vendor oversight frameworks, and privacy modernization efforts are convergin

United StatesInsurance

Alston & Bird LLP

Agents Of Change: Amendments To Washington State Insurance Regulations Take Effect October 18

Washington's Insurance Commissioner has announced significant amendments to insurance claims handling regulations that will reshape how insurers investigate and process claims in the state. The changes, effective October 2026, introduce new requirements for mitigation approvals, investigation standards, and claimant communications that could substantially impact insurer operations and liability exposure. These regulatory updates come in response to a surge in consumer complaints and litigation, establishing

United StatesInsurance

Ballard Spahr LLP

Don’t Try To Deny It: Federal Court Holds FCA Settlement Is Covered By Insurance

A federal court ruled that CNA must provide coverage for Guidehouse's $7.6 million False Claims Act settlement related to cybersecurity failures in New York's Emergency Rental Assistance Program portal. The decision addresses critical questions about when insurers can deny coverage for FCA settlements under professional liability policies, particularly regarding exclusions for fines, penalties, and deliberate acts.

United StatesInsurance

Crowell & Moring LLP

Cyber Insurance Decoded: What Your Policy Actually Covers, What It Excludes, And How To Maximize Your Protection

A data breach exposes thousands of customer records. An employee falls for a phishing email and wires $200,000 to a fraudulent account. A vendor’s compromised software infects your network.

United StatesInsurance

Ward and Smith, P.A

Massachusetts Appeals Court Affirms Chapter 93A Liability For Delayed Disability Insurance Benefits

The Massachusetts Appeals Court examined whether an insurer's two-year delay in paying disability benefits constituted a violation of state consumer protection and insurance laws. Despite medical evidence describing the plaintiff's feet as paralyzed and functionally useless, the insurer repeatedly denied claims under a policy provision for total loss of use of both feet, arguing the plaintiff could still walk with assistive devices.

United StatesInsurance

Greenberg Traurig

“Limited Partner” Health Plans Raise Concerns For State Regulators

Montana state insurance regulators recently raised a red flag about the increasing availability of self-insured limited partner health plans. As consumers seek relief from the skyrocketing costs of major medical insurance plans, limited partner health plans are rising in popularity, with Montana reporting that at least 12 companies now offer them in the state.

United StatesInsurance

Hall Benefits Law

Florida Appellate Court Finds Unaccrued And Premature Third-Party Bad-Faith Claim Filed In Violation Of Nonjoinder Statute Must Be Dismissed, Not Abated

A Florida appellate court found that an unaccrued and premature third-party bad-faith claim filed before a settlement or verdict against the insured is in direct violation of the nonjoinder statute ...

United StatesInsurance

Phelps Dunbar LLP

Is Your PFAS Coverage At Risk? An Ohio Federal Court Ruling Opens The Door To Broader Insurer Denials

A federal court in Ohio has ruled that an occupational disease exclusion in a commercial general liability policy bars coverage for PFAS-related personal injury claims brought by firefighters against a manufacturer of firefighting equipment. This landmark decision could significantly impact how insurers respond to PFAS product liability claims and may extend beyond occupational disease exclusions to other policy provisions using similarly broad language.

United StatesInsurance

Benesch, Friedlander, Coplan & Aronoff LLP